Spacewell

Belgium · www.spacewell.com · 24 vendors

Spacewell is a technology and consulting firm that provides smart building and workplace management software solutions. The company offers platforms for optimizing space usage, improving employee experience, energy management, and asset maintenance. They leverage IoT and AI to deliver real-time insights and automation for building performance and sustainability.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 24 sub-vendors.

Insights

Last updated 2026-08-14 · revision 2

24 direct vendors, 265 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Spacewell exhibits high migration readiness, primarily driven by its cloud-native, modern technology stack. The company leverages Google Cloud Platform (GCP) and a 'Cloud-First SaaS Architecture,' indicating a flexible and scalable foundation. Its use of REST APIs and an SDK integration framework suggests a modular system that can be more easily decoupled and migrated. The 'hardware-agnostic approach' for IoT sensors further reduces potential lock-in to specific physical infrastructure. Standard security practices like SSO, MFA, and RBAC are well-suited for cloud environments and facilitate secure transitions. However, several critical factors remain unknown, which could impact the complexity and cost of a migration. These include specific data residency requirements, the regulatory environment, and the explicit 'Vendor Lock-in Risk.' While the company uses 26 services from vendors across 8 unique countries, the exact number of distinct vendors and the nature of their contracts are not detailed, making a precise assessment of vendor lock-in challenging. The absence of financial stability data also means the company's capacity to fund a significant migration effort is not clear.

Compliance

10 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

Spacewell is an EU-based SaaS/cloud software provider with operations across 60+ countries and 2,000+ customers. NIS2 applicability requires careful assessment on two grounds: (1) As a 'digital provider' (specifically a cloud computing service provider and potentially a managed service provider), Spacewell may qualify as an Important Entity under NIS2 Annex II, which covers 'digital providers' including cloud computing services, online marketplaces, and online search engines. (2) Spacewell's parent Nemetschek Group has ~3,600 employees and €995.6M revenue (2024), far exceeding the medium enterprise threshold (50+ employees, €10M+ turnover), though NIS2 entity classification is assessed at the legal entity level. Risk is Medium because: if classified as a digital provider/managed service provider under NIS2, non-compliance could result in fines up to €10M or 2% of global turnover; however, the exact classification of Spacewell's SaaS offering under NIS2 digital provider categories requires legal assessment. Belgium transposed NIS2 via the NIS2 Act (April 2024), and the CCB (Centre for Cybersecurity Belgium) is the competent authority.

Evidence: https://spacewell.com/smart-building-platform/, https://spacewell.com/company/about-spacewell/, https://ccb.belgium.be/en/cybersecurity/nis2, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555

GDPR (source) — Compliant

Spacewell is headquartered in Belgium (EU) and explicitly states GDPR compliance on its Platform & Security page, with EU-hosted data centers specifically cited for GDPR compliance. As a SaaS provider processing personal data (employee workplace data, occupancy data, visitor data, energy consumption linked to individuals) for 2,000+ customers across 60+ countries, GDPR obligations are extensive — covering both controller and processor roles. Risk is Medium rather than Low because: (1) the volume and sensitivity of personal data processed (occupancy tracking, visitor management, employee desk reservations) creates ongoing compliance obligations; (2) cross-border data transfers to non-EEA countries (US, APAC) require appropriate safeguards; (3) as a data processor for enterprise clients, Spacewell must maintain robust DPA agreements and sub-processor chains. Risk is not High because the company explicitly acknowledges GDPR compliance, uses EU-hosted data centers, and has formal security certifications (ISO 27001, ISAE 3402) that support GDPR technical measures.

Evidence: https://spacewell.com/smart-building-platform/, https://spacewell.com/legal/privacy-policy/, https://spacewell.com/legal/cookie-policy/, https://spacewell.com/company/about-spacewell/, https://www.gegevensbeschermingsautoriteit.be/

CSRD (source) — Assessment Required

Spacewell is a subsidiary of Nemetschek Group (publicly listed on MDAX/TecDAX, €995.6M revenue 2024, ~3,600 employees across 80+ locations in 42 countries). Nemetschek Group clearly meets CSRD thresholds as a large listed company and is subject to CSRD reporting from financial year 2024 (first reports due 2025). At the Spacewell entity level, CSRD may apply directly if Spacewell meets the large company thresholds (250+ employees OR €50M+ turnover OR €25M+ balance sheet). Risk is Medium because: (1) Nemetschek Group's CSRD obligations cascade to subsidiaries for group reporting; (2) Spacewell's own energy management and ESG reporting products (Spacewell Energy, ESG reporting features) suggest awareness of sustainability reporting requirements; (3) Spacewell's Corporate Responsibility page indicates ESG awareness. Risk is not High because Spacewell benefits from group-level CSRD compliance through Nemetschek.

Evidence: https://spacewell.com/company/corporate-responsability/, https://spacewell.com/energy-management-software/energy-reporting-software/, https://spacewell.com/company/about-spacewell/

Financials

Three-year financials

Financial Resilience Score: 8/10

Spacewell benefits from strong financial backing as a subsidiary of Nemetschek SE, a publicly listed German company with approximately €10 billion market cap and €995.6 million in 2024 group revenue. This parent company support provides significant balance-sheet strength, access to capital, and downside protection well beyond what a stand-alone SME could offer. The recurring SaaS revenue model across its Workplace, Energy, and Asset platforms provides strong revenue visibility and predictability. The company operates within the 'Manage' segment of Nemetschek Group, which has historically been the smallest of four operating segments but has shown consistent growth in the high single-digit to low double-digit range. Spacewell has a diversified customer base of 2,000+ customers across 60 countries, including blue-chip names like Booking.com, Danone, Mercedes-Benz, Siemens, and AXA, reducing customer concentration risk. However, the Manage segment historically has lower EBITDA margins (typically 10-20%) compared to Nemetschek's Design segment (30%+), reflecting ongoing SaaS transition investment. The company faces competitive pressure in a crowded IWMS/CAFM market from players like Planon, MRI, IBM TRIRIGA, and Eptura. Integration complexity across acquired brands (MCS/Axxerion/DEXMA/O-Prognose) also poses execution risk. Overall, strong parent backing, recurring revenue, and regulatory tailwinds (CSRD, EED, EPBD) support a solid resilience profile.

Key strengths: Backed by Nemetschek SE (~€10bn market cap, €995.6M 2024 revenue), Recurring SaaS subscription revenue model provides visibility, Diversified customer base of 2,000+ customers across 60 countries, Blue-chip customer names (Booking.com, Danone, Siemens, AXA, Mercedes-Benz), Broad product portfolio post-M&A (IWMS + IoT + Energy + Maintenance), Regulatory tailwinds from EU ESG/energy directives (CSRD, EED, EPBD), Growth via bolt-on M&A strategy (Axxerion, DEXMA)

Risk factors: SaaS transition margin pressure - lowest margins in Nemetschek group, Highly competitive IWMS/CAFM market (Planon, MRI, IBM TRIRIGA, Eptura), Integration complexity across multiple acquired brands, Cyclicality of workplace real-estate spend, Limited standalone financial transparency as private subsidiary, Heavy European geographic concentration

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report